[d-kernel] [PATCH 5.10.y] config: CONFIG_RANDOMIZE_BASE=y

[d-kernel] [PATCH 5.10.y] config: CONFIG_RANDOMIZE_BASE=y

[dutyrok]

From: Alexandr Shashkin <dutyrok@altlinux.org>

Enable kernel address space layout randomization to prevent guest
security exploits based on the location of kernel objects.

Signed-off-by: Alexandr Shashkin <dutyrok@altlinux.org>
---
 config | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config b/config
index 9bd005564e56..e5917be74550 100644
--- a/config
+++ b/config
@@ -473,7 +473,7 @@ CONFIG_CRASH_DUMP=y
 # CONFIG_KEXEC_JUMP is not set
 CONFIG_PHYSICAL_START=0x1000000
 CONFIG_RELOCATABLE=y
-# CONFIG_RANDOMIZE_BASE is not set
+CONFIG_RANDOMIZE_BASE=y
 CONFIG_PHYSICAL_ALIGN=0x1000000
 CONFIG_HOTPLUG_CPU=y
 # CONFIG_BOOTPARAM_HOTPLUG_CPU0 is not set
-- 
2.33.8

Re: [d-kernel] [PATCH 5.10.y] config: CONFIG_RANDOMIZE_BASE=y

[Vitaly Chikunov]

On Thu, Apr 11, 2024 at 02:03:53PM +0300, dutyrok@altlinux.org wrote:
> From: Alexandr Shashkin <dutyrok@altlinux.org>
> 
> Enable kernel address space layout randomization to prevent guest
> security exploits based on the location of kernel objects.

Полагаю, это для std-def/p10.
Applied, thanks.

> 
> Signed-off-by: Alexandr Shashkin <dutyrok@altlinux.org>
> ---
>  config | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/config b/config
> index 9bd005564e56..e5917be74550 100644
> --- a/config
> +++ b/config
> @@ -473,7 +473,7 @@ CONFIG_CRASH_DUMP=y
>  # CONFIG_KEXEC_JUMP is not set
>  CONFIG_PHYSICAL_START=0x1000000
>  CONFIG_RELOCATABLE=y
> -# CONFIG_RANDOMIZE_BASE is not set
> +CONFIG_RANDOMIZE_BASE=y
>  CONFIG_PHYSICAL_ALIGN=0x1000000
>  CONFIG_HOTPLUG_CPU=y
>  # CONFIG_BOOTPARAM_HOTPLUG_CPU0 is not set
> -- 
> 2.33.8
> 
> _______________________________________________
> devel-kernel mailing list
> devel-kernel@lists.altlinux.org
> https://lists.altlinux.org/mailman/listinfo/devel-kernel

Re: [d-kernel] [PATCH 5.10.y] config: CONFIG_RANDOMIZE_BASE=y

[Alexandr Shashkin]

Если p9 и c9f2 поддерживаются, то там тоже отключена эта опция для 
un-def 5.10.y

11.04.2024 19:27, Vitaly Chikunov пишет:
> On Thu, Apr 11, 2024 at 02:03:53PM +0300, dutyrok@altlinux.org wrote:
>> From: Alexandr Shashkin <dutyrok@altlinux.org>
>>
>> Enable kernel address space layout randomization to prevent guest
>> security exploits based on the location of kernel objects.
> Полагаю, это для std-def/p10.
> Applied, thanks.
>
>> Signed-off-by: Alexandr Shashkin <dutyrok@altlinux.org>
>> ---
>>   config | 2 +-
>>   1 file changed, 1 insertion(+), 1 deletion(-)
>>
>> diff --git a/config b/config
>> index 9bd005564e56..e5917be74550 100644
>> --- a/config
>> +++ b/config
>> @@ -473,7 +473,7 @@ CONFIG_CRASH_DUMP=y
>>   # CONFIG_KEXEC_JUMP is not set
>>   CONFIG_PHYSICAL_START=0x1000000
>>   CONFIG_RELOCATABLE=y
>> -# CONFIG_RANDOMIZE_BASE is not set
>> +CONFIG_RANDOMIZE_BASE=y
>>   CONFIG_PHYSICAL_ALIGN=0x1000000
>>   CONFIG_HOTPLUG_CPU=y
>>   # CONFIG_BOOTPARAM_HOTPLUG_CPU0 is not set
>> -- 
>> 2.33.8
>>
>> _______________________________________________
>> devel-kernel mailing list
>> devel-kernel@lists.altlinux.org
>> https://lists.altlinux.org/mailman/listinfo/devel-kernel
> _______________________________________________
> devel-kernel mailing list
> devel-kernel@lists.altlinux.org
> https://lists.altlinux.org/mailman/listinfo/devel-kernel

Re: [d-kernel] [PATCH 5.10.y] config: CONFIG_RANDOMIZE_BASE=y

[Vitaly Chikunov]

On Thu, Apr 11, 2024 at 08:47:55PM +0300, Alexandr Shashkin wrote:
> Если p9 и c9f2 поддерживаются, то там тоже отключена эта опция для un-def
> 5.10.y

Добавил в un-def/p9. c9f2, видимо, не ко мне.

> 
> 11.04.2024 19:27, Vitaly Chikunov пишет:
> > On Thu, Apr 11, 2024 at 02:03:53PM +0300, dutyrok@altlinux.org wrote:
> > > From: Alexandr Shashkin <dutyrok@altlinux.org>
> > > 
> > > Enable kernel address space layout randomization to prevent guest
> > > security exploits based on the location of kernel objects.
> > Полагаю, это для std-def/p10.
> > Applied, thanks.
> > 
> > > Signed-off-by: Alexandr Shashkin <dutyrok@altlinux.org>
> > > ---
> > >   config | 2 +-
> > >   1 file changed, 1 insertion(+), 1 deletion(-)
> > > 
> > > diff --git a/config b/config
> > > index 9bd005564e56..e5917be74550 100644
> > > --- a/config
> > > +++ b/config
> > > @@ -473,7 +473,7 @@ CONFIG_CRASH_DUMP=y
> > >   # CONFIG_KEXEC_JUMP is not set
> > >   CONFIG_PHYSICAL_START=0x1000000
> > >   CONFIG_RELOCATABLE=y
> > > -# CONFIG_RANDOMIZE_BASE is not set
> > > +CONFIG_RANDOMIZE_BASE=y
> > >   CONFIG_PHYSICAL_ALIGN=0x1000000
> > >   CONFIG_HOTPLUG_CPU=y
> > >   # CONFIG_BOOTPARAM_HOTPLUG_CPU0 is not set
> > > -- 
> > > 2.33.8
> > > 
> > > _______________________________________________
> > > devel-kernel mailing list
> > > devel-kernel@lists.altlinux.org
> > > https://lists.altlinux.org/mailman/listinfo/devel-kernel
> > _______________________________________________
> > devel-kernel mailing list
> > devel-kernel@lists.altlinux.org
> > https://lists.altlinux.org/mailman/listinfo/devel-kernel
> _______________________________________________
> devel-kernel mailing list
> devel-kernel@lists.altlinux.org
> https://lists.altlinux.org/mailman/listinfo/devel-kernel